To better protect taxpayers, the IRS recently upgraded its identity verification process for certain online self-help tools.  The purpose is to prevent taxpayer impersonations and account takeovers by identity thieves. Because the Secure Access Authentication platform is more rigorous, it helps if you prepare to register in advance.

Currently, the Secure Access Authentication process applies to the Get Transcript Online, Get an IP PIN, e-Services and your tax account tools.

Here’s what new users need to get started:

• A readily available email address
• Your Social Security number
• Your filing status and address from your last-filed tax return
• Your personal account number from one of the following:
  • credit card
  • home mortgage loan
  • home equity (second mortgage) loan
  • home equity line of credit (HELOC)
  • car loan
    (The IRS does not retain this data)
• A readily available mobile device. For instant access, your name must be associated with a U.S-based mobile phone capable of receiving text messages. If the mobile phone number cannot be linked to your name, you may opt for a mailed activation code during registration. 

Note: 

If you have a “credit freeze” on your credit records through Experian, it must be temporarily lifted before you can successfully complete this process.

The credit card cannot be American Express, a debit card, or a corporate card issued in your name by your company or organization.

Because this process involves verification using financial records, there may be a “soft inquiry” placed on your credit report. This notice does not affect your credit score. The IRS does not retain your financial account information.

If you have a pay-as-you-go mobile phone or a business/family plan mobile phone not associated with your name, you may request that we mail an activation code to the address we have on file for you. To complete the registration process, you still must have either 1) a text-enabled, U.S.-based phone to receive a security code via text or 2) the IRS2Go mobile application to receive a security code within the IRS2Go app.

If you have already created an account with Secure Access and need to change your phone number, you must re-register.

First-time users of any Secure Access-supported tool must:

• Submit name and email address to receive a confirmation code.
• Enter the emailed confirmation code.
• Provide SSN, date of birth, filing status and address on the last filed tax return.
• Provide some financial account information for verification such as the last eight digits of their credit card number or car loan number or home mortgage account number or home equity (second mortgage) loan number or home equity line of credit.
• Enter a mobile phone number to receive a six-digit activation code via text message OR request an activation code by mail (see below).
• Enter the activation code sent to mobile phone.
• Create username and password, create a site phrase and select a site image.

First-time users who opt for an Activation Code by Mail must:

• Complete the steps above through financial account information.
• On the mobile phone verification page, select “Receive an activation code by postal mail."
• Create username and password, create a site phrase, select a site image, and select secret questions.
• Allow 5 to 10 business days for mail delivery of the activation code.
• Return to the online service and enter your username and password.
• Enter the activation code at the prompt.
• Enter number for any type of text-enabled phone at the prompt (this may include a pay-as-you-go mobile phone or a business/family plan mobile phone not associated with your name); and/or select the option to receive a security code via the IRS2Go mobile application.
• Complete mobile device activation.
• Check mobile device for a security code.
• Enter the security code at the prompt to complete the Secure Access registration process.

Returning users with existing credentials but new to Secure Access must:

• Log in with an existing username and password.
• Submit financial account information for verification, for example, the last eight digits of a credit card number or car loan number or home mortgage account number or home equity (second mortgage) loan account number.
• Submit a mobile phone number to receive an activation code via text OR request an activation code by mail (see above).

Returning users who previously completed the Secure Access process must:

• Log in with an existing username and password.
• Receive a security code via mobile device provided during account set up.
• Enter the security code into secure access.
• You will need a security code each time you log into Secure Access.   

Using the IRS2Go Mobile App to Receive a Security Code:

• The IRS2Go app is a mobile app that is available for Android smartphones, Android tablets, iPhones, iPads, and Amazon Fire tablets.
• IRS2Go offers the option to generate the security code needed for each login.  There is a one-time registration process where your app-enabled device must be connected to the internet. After registering the mobile device, you do not need to be connected to the Internet to generate the security code via the IRS2Go app. To use the IRS2Go Security Code feature, the time on your mobile device must be accurate.   
• There are two ways to select the IRS2Go option to receive the security code needed for each login.
  • The first way to register your IRS2Go app is you can ask for an activation code by mail. When you return to Secure Access and enter the activation code, you will have the option of receiving the security code via text or via the IRS2Go app.  To register the app, select “set up a security code using IRS2Go mobile app."
  • The second way to register the IRS2Go app is if you’ve previously registered with a mobile phone linked to your name, you can add the IRS2Go app via your profile page after you have logged in.  In the Security Code section, click "set up IRS2Go mobile app authentication."
• The IRS2Go app may only be connected to one account at a time. The app cannot support multiple Secure Access users.
• When you log into an IRS.gov application, you may remove and/or replace your IRS2Go device from your profile page. When replacing a mobile device, do not remove the IRS2Go app from your original device until you have set up the IRS2Go security code on your new device.